This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          ziKyczqS60A3icM9G/xha9bCpBFx+5WRm+LLRgDiEZg=
Subject key identifier:   9C:39:13:34:0E:E6:AE:C9:B8:65:EA:33:0F:69:D0:58:7E:3D:75:DA
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       019BF79A58CF970A04ED841FBEAC8ED7599E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 00:00:46 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:46 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:46 +0000
Files and hashes:         1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
                          2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
                          3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: fBcO47XNyJBaipGbo8/oldEO4UkaCxgRUQo1Rp/1WkI=)
                          4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:58:cf:97:0a:04:ed:84:1f:be:ac:8e:d7:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jan 26 00:00:46 2026 GMT
            Not After : Jan 27 00:00:46 2026 GMT
        Subject: CN=9c3913340ee6aec9b865ea330f69d0587e3d75da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:cf:b2:38:f3:14:b8:fb:43:e2:e7:4d:ba:
                    33:a6:54:3c:5d:5b:ac:09:73:61:e9:3c:ef:5f:92:
                    ca:4c:82:3e:1e:7b:f1:9e:51:49:f7:07:52:af:48:
                    7c:26:c1:ae:80:f9:03:94:b0:e3:f9:99:02:5c:b8:
                    8b:68:72:ec:7d:9e:c7:01:69:91:3c:b5:d5:b4:8b:
                    a6:e6:9c:bd:1d:94:52:c6:79:38:65:be:b9:19:33:
                    6b:19:11:2d:76:ff:e3:b2:f6:5e:57:a4:2b:d6:6b:
                    92:e5:b1:38:56:87:ca:7a:16:36:b5:03:0c:03:6f:
                    9a:26:e8:48:00:e0:5c:a6:03:12:ce:9e:4e:bd:3b:
                    ec:34:9c:8e:f1:64:97:47:37:bd:8c:f3:68:e9:90:
                    53:93:e5:b8:4f:a4:4f:08:1c:e0:bd:46:03:f4:15:
                    28:54:25:34:cf:d6:3e:a9:22:39:f7:8a:bd:05:f4:
                    7e:79:1b:12:db:0c:4a:3e:cb:30:bc:89:be:b7:3a:
                    72:b8:30:54:13:79:1d:8c:e1:24:c3:77:25:05:15:
                    b3:97:e5:ca:d8:3b:7d:48:4c:ab:67:f9:b0:0b:d0:
                    0a:f2:7c:c5:5b:04:33:60:4c:c3:0e:99:26:6a:3d:
                    69:3b:c0:80:c5:5a:07:dd:4e:b0:7d:b8:f6:4a:9c:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:39:13:34:0E:E6:AE:C9:B8:65:EA:33:0F:69:D0:58:7E:3D:75:DA
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:ce:a1:fa:2e:c2:87:be:c2:a0:53:f8:e6:7b:85:5d:8a:
         4e:c3:11:39:c0:8f:26:15:5f:f0:cc:be:4d:f1:e8:eb:2f:e3:
         cd:ae:b6:df:bb:24:cd:cc:37:e3:6f:1c:8f:6c:a2:e1:d9:b1:
         6d:51:da:33:7a:c7:1a:2e:5d:a2:3c:d1:94:32:8c:0c:fe:8f:
         a9:b7:a3:22:b5:17:60:52:bd:cb:03:2b:2d:42:0f:2b:9f:cd:
         f0:e0:c9:a5:1a:0b:1e:23:21:91:2f:06:cb:50:42:0f:32:15:
         37:c4:1e:98:9b:ee:b0:a7:83:86:02:4f:aa:c7:7b:b7:d6:b3:
         fa:a9:e2:ef:ef:60:55:ba:32:cf:2f:dc:78:79:cd:e2:bf:eb:
         53:06:7a:6f:4a:65:0d:41:78:99:1c:7e:6c:b1:e5:07:cf:f1:
         0b:41:c8:7b:d9:83:cb:4f:df:91:b1:ad:82:c7:c3:20:ae:e5:
         10:ab:c0:9a:ed:b9:3d:fd:53:56:0f:34:ef:8e:da:22:32:de:
         b5:f5:52:8a:af:b4:da:f4:c8:b7:c0:e0:13:9f:51:c8:5a:e8:
         00:2a:a1:1c:29:0d:a5:28:6e:e3:9e:a8:5f:c5:d4:4d:49:a9:
         ae:b6:a4:a8:c8:06:b0:92:d7:0f:46:8e:05:d1:9f:c8:80:27:
         d5:f1:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:42 2026 by rpki-client